Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa
File:                     3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa (raw, json)
Hash identifier:          fHPwObS5wfR2fAzNDyZOFoMjzyQ+FtDz3M8RV2Z9p8w=
Subject key identifier:   AB:10:4A:AD:B8:18:46:B1:54:D7:FB:8A:BF:9C:C8:9F:D6:DC:B8:6B
Certificate issuer:       /CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
Certificate serial:       6343CAE015111E8F3C4DEC9CCC45D00FE8A85603
Authority key identifier: 71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa
Signing time:             Fri 15 Mar 2024 23:55:01 +0000
ROA not before:           Fri 15 Mar 2024 23:50:01 +0000
ROA not after:            Fri 14 Mar 2025 23:55:01 +0000
asID:                     265741
IP address blocks:        128.201.81.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl
                          rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 27 Nov 2024 03:32:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:43:ca:e0:15:11:1e:8f:3c:4d:ec:9c:cc:45:d0:0f:e8:a8:56:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7116290D7EB961DBB2AE7C4F1070543D6F8030A9
        Validity
            Not Before: Mar 15 23:50:01 2024 GMT
            Not After : Mar 14 23:55:01 2025 GMT
        Subject: CN=AB104AADB81846B154D7FB8ABF9CC89FD6DCB86B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:d9:61:d6:4a:92:35:d4:a4:49:56:db:93:
                    1b:8d:10:61:7c:1a:85:5e:0f:55:93:4e:06:fa:09:
                    e1:0f:83:52:ef:7a:ba:d8:43:50:fc:42:24:b1:71:
                    d0:b5:9a:ca:67:d4:0e:86:c4:2d:ba:cf:25:f5:04:
                    f7:27:05:c7:cc:75:d2:57:10:76:18:b8:ce:19:0b:
                    73:e8:bb:5c:5c:76:c3:b5:96:38:6d:c2:62:8b:c2:
                    d1:f7:83:63:88:d8:95:fa:ed:f9:53:2c:c1:ad:c6:
                    4d:e6:a7:6a:ca:03:de:d2:1a:d5:cc:55:36:87:96:
                    9b:e6:b9:f3:ab:f0:8a:ed:19:37:56:11:8c:88:ed:
                    56:28:93:44:40:b9:8f:e3:fa:cd:f9:61:c4:d6:19:
                    27:dc:b6:a2:ce:9c:1f:4b:e7:02:a3:83:31:7e:b8:
                    62:d4:ef:7b:01:b8:ea:5e:53:17:0b:46:ab:f4:73:
                    d3:a7:e7:32:71:52:4d:f7:e2:af:13:a4:92:d7:37:
                    55:d5:65:88:7c:a6:51:78:96:35:76:c3:ef:8f:14:
                    7c:f5:1e:4a:8d:d0:c1:65:15:fb:c3:aa:2f:72:a7:
                    63:15:41:0e:be:9a:34:66:5e:a6:44:b9:24:7f:36:
                    6b:db:a3:f2:a1:b7:06:f4:6f:35:89:00:51:be:f5:
                    25:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:10:4A:AD:B8:18:46:B1:54:D7:FB:8A:BF:9C:C8:9F:D6:DC:B8:6B
            X509v3 Authority Key Identifier:
                keyid:71:16:29:0D:7E:B9:61:DB:B2:AE:7C:4F:10:70:54:3D:6F:80:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7116290D7EB961DBB2AE7C4F1070543D6F8030A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/88D7B05E68A363B604AA1DBA9B3665F8C3F55B13B2B284317471F87709EEA0D8/0/3132382e3230312e38312e302f32342d3234203d3e20323635373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:ff:79:81:d0:92:40:38:0b:75:87:f1:51:f6:b0:7c:0a:5f:
         16:44:a2:1b:00:f9:a6:63:e9:ea:e6:3b:f5:7c:df:83:ed:37:
         18:f5:00:4d:39:58:3f:89:b4:24:23:64:53:cf:1f:6c:17:08:
         bb:33:a9:fd:76:2f:64:77:4a:3c:4a:49:70:d0:e4:df:b3:80:
         9f:bc:1e:3f:a9:df:be:b9:cd:b7:2a:5a:fd:d2:dc:13:e0:93:
         06:f1:d8:12:e3:81:0b:80:77:de:3c:c7:97:cb:ba:0d:cc:5b:
         08:cf:d2:d6:8f:d3:54:db:e0:e0:fa:9d:95:6b:72:1b:85:db:
         fb:0f:6a:db:94:aa:23:2c:74:30:24:01:cd:d9:2f:e0:2d:45:
         cf:aa:df:6f:b9:bd:c3:80:c7:a0:8a:2d:7a:03:37:b4:a2:28:
         0f:ca:d7:8e:9e:24:51:b1:03:3c:04:3e:db:2a:35:11:c2:72:
         5f:02:4a:62:94:e5:11:d5:a2:8c:4b:6d:67:52:4c:a1:e8:2e:
         6d:34:e2:64:7c:7d:0b:5b:5c:f8:75:15:a8:02:3b:30:f4:b7:
         9a:0e:ee:f3:62:9c:a1:d4:3b:00:07:d0:f4:86:c1:25:4a:da:
         91:94:9b:dc:e6:46:f2:c5:8f:f7:69:ca:5f:61:dd:c4:be:b7:
         1c:44:f8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:45 2024 by rpki-client on console-fra.rpki-client.org